Find a critical PHP vulnerability with Gemini and AI-assisted exploit work
Wiz's researchers used Gemini 4 Argon and GPT-5.6 Sol, with their Wiz Atlas platform, to find a remote code execution bug in PHP, build the exploit, detect attacks and validate the patch. They note models let them adapt the exploit across PHP versions and memory layouts.
Source
danlark1 on Hacker News · 2026-10-21 · Project link
Written in our own words. Credit to the original author. Link checked 2026-10-22.
What they did
Wiz's researchers used Gemini 4 Argon and GPT-5.6 Sol, with their Wiz Atlas platform, to find a remote code execution bug in PHP, build the exploit, detect attacks and validate the patch. They note models let them adapt the exploit across PHP versions and memory layouts.
Result (as claimed)
PHP2Shell was disclosed and patched; PHP shipped emergency releases (442 HN points).
Tools they used
Cost: Gemini 4 Argon: from $2 in / $10 out per 1M tokens.
Set it up
Gather your sources
Collect the papers, notes, links or files you want to work from in one place.
Load them into the tool
Open Gemini 4 Argon, GPT-5.6 Sol and add your sources. Keep the original files so you can check claims later.
Ask focused questions
Ask for summaries, comparisons or connections with citations to the source passages.
Verify and save
Spot check claims against the sources, then save the output as notes you can reuse.
Copy the full setup prompt
Paste into your agent and it will walk you through the setup, asking before anything that sends, posts or spends.
You are helping me set up this AI use case end to end in Claude Code. Goal: Find a critical PHP vulnerability with Gemini and AI-assisted exploit work What the original author did: Wiz's researchers used Gemini 4 Argon and GPT-5.6 Sol, with their Wiz Atlas platform, to find a remote code execution bug in PHP, build the exploit, detect attacks and validate the patch. They note models let them adapt the exploit across PHP versions and memory layouts. Reported result (as claimed by the author): PHP2Shell was disclosed and patched; PHP shipped emergency releases (442 HN points). Source: https://news.ycombinator.com/item?id=50180836 Tools they used: Gemini 4 Argon, GPT-5.6 Sol Category: Research & learning Please: 1. Ask me 3 short questions about my situation (accounts I have, budget, what I want the output to look like). 2. Propose a step-by-step plan using these tools or cheaper alternatives, with the time and cost of each step. Use official pricing pages; say "check pricing" if unsure. 3. Then do the setup with me one step at a time, waiting for my OK before anything that sends messages, posts publicly, spends money or deletes data. 4. Finish with a checklist to run it again next time.
You are helping me set up this AI use case end to end in Codex. Goal: Find a critical PHP vulnerability with Gemini and AI-assisted exploit work What the original author did: Wiz's researchers used Gemini 4 Argon and GPT-5.6 Sol, with their Wiz Atlas platform, to find a remote code execution bug in PHP, build the exploit, detect attacks and validate the patch. They note models let them adapt the exploit across PHP versions and memory layouts. Reported result (as claimed by the author): PHP2Shell was disclosed and patched; PHP shipped emergency releases (442 HN points). Source: https://news.ycombinator.com/item?id=50180836 Tools they used: Gemini 4 Argon, GPT-5.6 Sol Category: Research & learning Please: 1. Ask me 3 short questions about my situation (accounts I have, budget, what I want the output to look like). 2. Propose a step-by-step plan using these tools or cheaper alternatives, with the time and cost of each step. Use official pricing pages; say "check pricing" if unsure. 3. Then do the setup with me one step at a time, waiting for my OK before anything that sends messages, posts publicly, spends money or deletes data. 4. Finish with a checklist to run it again next time.
You are helping me set up this AI use case end to end in Grok Bot. Goal: Find a critical PHP vulnerability with Gemini and AI-assisted exploit work What the original author did: Wiz's researchers used Gemini 4 Argon and GPT-5.6 Sol, with their Wiz Atlas platform, to find a remote code execution bug in PHP, build the exploit, detect attacks and validate the patch. They note models let them adapt the exploit across PHP versions and memory layouts. Reported result (as claimed by the author): PHP2Shell was disclosed and patched; PHP shipped emergency releases (442 HN points). Source: https://news.ycombinator.com/item?id=50180836 Tools they used: Gemini 4 Argon, GPT-5.6 Sol Category: Research & learning Please: 1. Ask me 3 short questions about my situation (accounts I have, budget, what I want the output to look like). 2. Propose a step-by-step plan using these tools or cheaper alternatives, with the time and cost of each step. Use official pricing pages; say "check pricing" if unsure. 3. Then do the setup with me one step at a time, waiting for my OK before anything that sends messages, posts publicly, spends money or deletes data. 4. Finish with a checklist to run it again next time.
The Daily 5
Get five new use cases tomorrow morning
Free. Real sources. Unsubscribe any time.
Guides for this use case
How to build with Gemini 4 Argon and Gemini agents · How to control coding agents from your phone · How to build agent memory and context layers · How to add memory to coding agents
Related use cases
Benchmark AI models by having them play StarCraft through code
StarSkirmish Bench has LLMs play StarCraft: Brood War by writing code, now refreshed with results from the flagship OpenAI, Anthropic, Google and Muse models including Gemini 4 Argon.
Compare four AI models by asking each to build the same machine
One prompt, build a radial engine, went to Claude Opus 5.5, GPT-6 Astra, Gemini 4 Argon and Grok 4.7. Each built a different machine, which shows how differently the models interpret the same words.
Build a WebGPU car stunt game with Gemini 4 Argon in Antigravity
Over a weekend he built Roadster Jump, a WebGPU simulation in three.js and Blender where you launch a car across a 250 m canyon with thrusters, including custom shaders, fixed 120 Hz physics and a rigged 7-part car.
Build a 3D horror corridor scene in Blender with Gemini 4 Argon
He used Gemini 4 Argon in VS Code to drive Blender and build a horror corridor with red emergency light, pipes, cables and a glowing orb at the end of the hall.